Government ISSE - Vulnerability Management & Compliance Lead

att; Chantilly (VA); Presencial; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

AT&T Global Public Sector is seeking an Information Systems Security Engineer (ISSE) to lead vulnerability management and ensure compliance across government customers in a full-time, onsite role based in Chantilly, VA. You will manage Tenable Security Center, integrate with Xacta and ServiceNow, and translate FISMA/NIST requirements into concrete security controls.

You’ll collaborate with product, engineering, and government stakeholders to deliver measurable risk reduction and robust security

Qualificações

• Lead and continuously improve the enterprise vulnerability management program using Tenable Security Center.
• Own the end-to-end vulnerability management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
• Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability management processes, controls, and governance practices.
• Develop executive dashboards, operational metrics, trend analysis, and decision-ready reporting to communicate security posture, remediation progress, and residual risk.
• Leverage expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec technologies to assess exposure and recommend risk-based remediation strategies.

Responsabilidades

• Lead and continuously improve the vulnerability management program using Tenable Security Center.
• Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.
• Own the end-to-end vulnerability management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
• Integrate Tenable Security Center findings with Xacta 360 and ServiceNow workflows to support continuous monitoring, POA&M management, control evidence, risk tracking, remediation activities, and authorization reporting.
• Analyze vulnerability data, validate findings, identify coverage gaps and credentialing issues, distinguish false positives from actionable risk, and provide remediation guidance to technical teams.
• Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability management processes, controls, and governance practices.
• Develop executive dashboards, operational metrics, trend analysis, and decision-ready reporting to communicate security posture, remediation progress, and residual risk.
• Establish and maintain vulnerability management governance, including standard operating procedures, service-level objectives, escalation paths, evidence requirements, quality controls, and accountability mechanisms.
• Leverage expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec technologies to assess exposure and recommend risk-based remediation strategies.
• Correlate vulnerability information with security events, asset inventories, identity data, privileged-access records, network telemetry, DNS/IPAM information, ServiceNow records, and X.

Conhecimentos

Windows Server

Active Directory

Nutanix

CyberArk

SailPoint

Splunk

Infoblox

Cisco SD-WAN

NetFlow

IPsec

Vulnerability management

Ferramentas

Tenable Security Center

Xacta 360

ServiceNow

Descrição da oferta de emprego

AT&T Global Public Sector is seeking an Information Systems Security Engineer (ISSE) to lead vulnerability management and ensure compliance across government customers in a full-time, onsite role based in Chantilly, VA. You will manage Tenable Security Center, integrate with Xacta and ServiceNow, and translate FISMA/NIST requirements into concrete security controls.

You’ll collaborate with product, engineering, and government stakeholders to deliver measurable risk reduction and robust security